$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft File: 9_nYpDVdZzudTn8VXTp45eZg_qU.mft (raw, json) Hash identifier: UIRwPoz2oYu2W+cEM+7JUNYErU/UmEz/umS28qfihKs= Subject key identifier: 36:0D:B4:50:42:8F:1E:30:A5:CF:1D:7A:CC:6A:83:30:B2:D7:D0:7A Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 Certificate issuer: /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Certificate serial: 04B0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft Manifest number: 04A9 Signing time: Wed 02 Jul 2025 17:36:17 +0000 Manifest this update: Wed 02 Jul 2025 17:36:17 +0000 Manifest next update: Wed 09 Jul 2025 17:36:17 +0000 Files and hashes: 1: 9_nYpDVdZzudTn8VXTp45eZg_qU.crl (hash: jFFtJN5PZLJ+nXXrNSdTTFdE2CyHt8JbYwgYOs1IC2Q=) 2: 53647CC8284511EE8A9EF045C4F9AE02.roa (hash: 7V54SxSgQ+SNaGeYZDWb9OGgqMLMcejVc584VWscbyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1200 (0x4b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Validity Not Before: Jul 2 17:36:17 2025 GMT Not After : Jul 9 17:36:17 2025 GMT Subject: CN=68656e11-2f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3f:97:5b:66:da:78:97:a8:cd:b7:51:ff:cb: 6a:93:a8:43:cf:08:74:6f:f7:79:ec:a9:82:c6:d7: 9b:37:56:df:76:dd:09:2e:e8:be:be:cd:46:7b:1d: 47:6c:64:2e:98:bb:e5:c4:68:ae:b5:cc:27:78:a5: c5:7a:ac:d2:7a:00:a6:1e:26:49:9a:4f:d5:33:f0: 15:e4:10:4d:2a:af:a9:25:6a:87:71:b1:b2:65:26: 96:17:81:99:34:fb:3e:96:45:68:38:35:7d:72:4a: de:ac:af:03:e6:2c:85:e1:a9:91:0f:59:97:ce:08: 25:2c:07:f4:d6:bd:19:c8:99:99:63:78:e3:a2:09: 76:83:c0:5e:2b:1b:3a:40:c9:59:66:18:d3:4b:34: 9b:a4:48:b6:0a:d6:39:5a:f7:93:1c:14:e9:52:1b: e0:d5:e9:a4:43:67:03:a3:14:37:bc:c7:17:c1:41: 4c:11:53:9d:08:c1:e4:06:5d:00:8a:d9:f0:a7:30: 9a:2d:b0:61:5d:d9:2b:8b:10:00:a0:4d:48:2d:b0: 1e:68:26:fd:4d:d3:a1:b2:ed:5f:62:0c:bd:68:25: 1e:18:96:06:a8:07:22:bf:d3:71:67:b8:ec:1d:35: 2d:76:4e:e5:a6:4a:23:e6:bd:a1:62:f5:99:73:34: 64:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0D:B4:50:42:8F:1E:30:A5:CF:1D:7A:CC:6A:83:30:B2:D7:D0:7A X509v3 Authority Key Identifier: keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:3a:c0:96:fc:48:14:f2:50:81:d4:1c:bd:94:2f:31:e5:c1: b7:73:7a:ce:ca:6b:46:e3:b5:2d:de:5f:ee:4b:2a:1c:83:23: ba:6e:a7:c4:8a:14:f8:8d:4d:6b:1d:d6:aa:c6:95:64:eb:11: 02:ca:37:98:2c:1e:d5:a7:fe:bf:69:07:4d:71:21:cd:52:81: 60:24:f3:e0:b2:ac:7e:f3:17:ed:cf:3a:ab:d9:14:cb:dd:ab: 43:4f:2f:a5:ea:3b:48:c0:26:fb:6d:26:df:f0:ed:44:d8:2a: ec:69:86:d5:12:67:06:a6:4e:1d:fc:aa:8f:6e:d1:e0:9a:2d: 0c:24:53:0f:8c:56:97:94:70:20:c8:a3:1c:fa:66:ef:f4:c3: d9:b2:7e:a9:ce:fc:d2:28:1d:85:82:bd:a8:a2:6f:ab:26:e6: 1c:42:d6:23:c3:42:5c:74:2e:4f:24:6c:9e:51:78:81:ee:b8: 14:78:1e:9a:e2:95:a6:da:d8:91:6d:a6:c8:b3:4e:9e:f7:3e: 14:0a:de:a1:0c:96:4b:d4:a1:39:21:a8:c4:7c:21:cd:1f:c7: 60:56:93:ed:ad:f1:db:f1:0e:b5:aa:a6:d8:90:ba:12:42:39: 14:04:a9:04:7f:15:af:b6:a2:b5:83:ba:93:54:1d:9b:aa:18: c4:ea:4b:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKEY3RjlEOEE0MzU1RDY3M0I5RDRFN0YxNTVEM0E3OEU1 RTY2MEZFQTUwHhcNMjUwNzAyMTczNjE3WhcNMjUwNzA5MTczNjE3WjAYMRYwFAYD VQQDEw02ODY1NmUxMS0yZjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwD+XW2baeJeozbdR/8tqk6hDzwh0b/d57KmCxtebN1bfdt0JLui+vs1Gex1H bGQumLvlxGiutcwneKXFeqzSegCmHiZJmk/VM/AV5BBNKq+pJWqHcbGyZSaWF4GZ NPs+lkVoODV9ckrerK8D5iyF4amRD1mXzgglLAf01r0ZyJmZY3jjogl2g8BeKxs6 QMlZZhjTSzSbpEi2CtY5WveTHBTpUhvg1emkQ2cDoxQ3vMcXwUFMEVOdCMHkBl0A itnwpzCaLbBhXdkrixAAoE1ILbAeaCb9TdOhsu1fYgy9aCUeGJYGqAciv9NxZ7js HTUtdk7lpkoj5r2hYvWZczRkaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYNtFBC jx4wpc8desxqgzCy19B6MB8GA1UdIwQYMBaAFPf52KQ1XWc7nU5/FV06eOXmYP6l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMTYyRTAzQTNE M0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6dWRUbjhWWFRwNDVlWmdf cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlfbllwRFZkWnp1ZFRuOFZYVHA0NWVaZ19xVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMTYyRTAzQTNEM0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6 dWRUbjhWWFRwNDVlWmdfcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlOsCW/EgU8lCB1By9lC8x5cG3c3rOymtG47Ut3l/uSyocgyO6bqfE ihT4jU1rHdaqxpVk6xECyjeYLB7Vp/6/aQdNcSHNUoFgJPPgsqx+8xftzzqr2RTL 3atDTy+l6jtIwCb7bSbf8O1E2CrsaYbVEmcGpk4d/KqPbtHgmi0MJFMPjFaXlHAg yKMc+mbv9MPZsn6pzvzSKB2Fgr2oom+rJuYcQtYjw0JcdC5PJGyeUXiB7rgUeB6a 4pWm2tiRbabIs06e9z4UCt6hDJZL1KE5IajEfCHNH8dgVpPtrfHb8Q61qqbYkLoS QjkUBKkEfxWvtqK1g7qTVB2bqhjE6ksy -----END CERTIFICATE-----Generated at Fri Jul 4 07:51:04 2025 by rpki-client